View RCF - OIRA Conclusion

Title: Secure Software Self-Attestation Common Form

Type of RCF: RCF New
OIRA Conclusion Action: Approved without change	Conclusion Date: 05/13/2024
Retrieve Notice of Action (NOA)	Date Received in OIRA: 05/09/2024
Terms of Clearance:

Description of Agency Usage: The attestation form information will be used by OPM to provide great assurances that help understand whether the software provider performed due diligence followed secure code practices which align with NIST 800-216 Secure Software Development Practices (SSDF). OMB circular M-22-18 requires CISA in consultation with OMB to develop a secure software attestation common form for all federal departments and agencies. Agencies will collect software attestation information from software suppliers.

Authorizing Statute(s): None

Annual Cost to Federal Government:
Agency Contact: Alexys Stanley 202 606-1183 alexys.stanley@opm.gov

Common Form Information Collections (IC) in this RCF:

IC Title	Status	Responses	Hours	Dollars	Document Type	Form No.	Form Name
Secure Software Development Attestation Form		120	291	0	Form and Instruction	N/A	Secure Software Sefl-Attestation Common Form

RCF Summary of Burden:

	Total Approved	Change Due to Agency Discretion
Annual Number of Responses	120	120
Annual Time Burden (Hours)	291	291
Annual Cost Burden (Dollars)	0	0

Burden increases because of Program Change due to Agency Discretion: Yes

Burden Increase Due to: Miscellaneous Actions

Burden decreases because of Program Change due to Agency Discretion: No

Burden Reduction Due to:

Short Statement: Changes are due to agency estimates.